CVE-2020-12272: Fedoraproject Fedora

Medium severity, CVSS 5.3. EPSS: 2.2% chance of exploitation in the next 30 days.

OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the example.net(.example.com substring.

Affected products

• Fedoraproject Fedora: version 33 only; version 34 only
• Trusteddomain Opendmarc: from 1.0.0, up to and including 1.3.2; version 1.4.0 only

Published 2020-04-27. Last modified 2026-06-17.